Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a3a2f33332d3333203d3e203631383531.roa
File:                     323830343a316134633a3a2f33332d3333203d3e203631383531.roa (raw, json)
Hash identifier:          xSGhT/oTs8lLUjlKKmM2XXX5SRnRwOB9kjE8lf5PuXk=
Subject key identifier:   0B:A3:15:B1:8B:23:67:AC:C9:D9:93:7C:9A:16:1F:30:E8:20:FB:14
Certificate issuer:       /CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
Certificate serial:       5FBB8A3C2B86E355454381E6E43BE3D43DA88B35
Authority key identifier: 6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a3a2f33332d3333203d3e203631383531.roa
Signing time:             Wed 22 Jul 2026 22:02:09 +0000
ROA not before:           Wed 22 Jul 2026 21:57:09 +0000
ROA not after:            Wed 21 Jul 2027 22:02:09 +0000
asID:                     61851
IP address blocks:        2804:1a4c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:bb:8a:3c:2b:86:e3:55:45:43:81:e6:e4:3b:e3:d4:3d:a8:8b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
        Validity
            Not Before: Jul 22 21:57:09 2026 GMT
            Not After : Jul 21 22:02:09 2027 GMT
        Subject: CN=0BA315B18B2367ACC9D9937C9A161F30E820FB14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e2:31:78:52:6d:eb:c2:61:57:de:70:56:51:
                    7f:b1:42:f0:3d:18:b0:d7:e1:2e:db:4c:8a:4c:73:
                    99:b4:47:f7:1d:35:d5:44:b6:46:18:8b:0b:fe:a4:
                    e6:4b:01:6f:bf:32:df:da:75:7b:60:94:db:4e:aa:
                    21:99:20:91:b6:f9:22:c6:c4:03:2a:4f:87:f5:0c:
                    b3:3d:58:27:51:a6:89:03:e6:3f:63:4f:2e:b2:4b:
                    e5:2a:86:16:74:9a:b7:59:78:46:a4:58:67:03:46:
                    b0:dd:8b:91:84:5b:fd:93:f9:53:a7:20:3e:61:4f:
                    b5:14:63:6c:ae:30:ac:25:b2:88:b7:6c:d0:76:e5:
                    11:5d:6b:17:b8:af:d7:2f:36:9a:29:5a:3e:9e:19:
                    fd:c1:98:bf:79:94:22:5a:bd:d5:ba:02:d5:5b:ee:
                    f3:37:66:a4:f4:2f:04:03:0a:cb:c3:27:e1:b0:c6:
                    1a:28:cf:b6:d9:c6:fc:90:9e:86:0a:12:9f:e9:d5:
                    6a:8d:72:03:2b:42:de:eb:9d:db:25:ad:24:e4:f3:
                    26:3b:96:34:ab:36:27:5c:92:a8:24:12:2d:ad:b5:
                    df:55:92:91:c2:76:c0:9e:82:25:23:01:bf:a8:28:
                    45:ec:9e:53:4e:60:9b:50:ae:14:6f:e6:d3:c9:1a:
                    8d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A3:15:B1:8B:23:67:AC:C9:D9:93:7C:9A:16:1F:30:E8:20:FB:14
            X509v3 Authority Key Identifier:
                keyid:6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a3a2f33332d3333203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a4c::/33

    Signature Algorithm: sha256WithRSAEncryption
         2f:ae:e8:21:c3:63:fe:53:79:5a:3d:98:8b:5d:1a:43:cd:68:
         ff:85:dc:51:e1:9d:ad:34:06:40:04:fa:4c:c0:fc:46:ae:91:
         45:e2:81:98:c9:0f:12:85:1f:e0:1f:ce:de:63:0c:5a:d7:88:
         f9:63:ee:30:da:98:a3:14:f4:52:ce:ef:c0:1e:85:8b:26:33:
         bc:9e:a1:ab:9d:36:29:a3:a3:d6:00:33:2b:3f:62:9d:bd:fd:
         d4:e1:e3:db:8c:d1:a8:99:6a:a7:00:9d:24:2c:4f:2e:05:85:
         c0:1d:67:ef:68:2a:ca:45:c3:26:64:04:fb:c3:99:44:0c:ea:
         b5:68:d6:c5:a0:80:c8:bc:11:b9:3f:76:95:7a:ac:e3:6b:6c:
         ad:97:0c:17:2c:52:b8:38:93:54:14:ca:f4:72:ed:f3:68:d1:
         8b:f8:06:69:e8:55:ee:55:33:3f:ae:de:b9:80:3a:c3:10:13:
         a7:7e:7c:f8:5c:ca:9d:02:49:b2:88:2d:36:96:56:74:4e:05:
         ad:12:1e:b9:d4:89:f6:1c:3f:e1:e1:3d:fe:68:82:f1:b0:72:
         0e:6e:99:48:78:27:ed:42:5e:20:35:db:98:4c:91:bd:82:b4:
         df:fa:5f:a1:4c:c1:3e:0e:09:1c:a2:d5:63:3d:73:c5:0e:cf:
         9f:14:f0:63
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUX7uKPCuG41VFQ4Hm5Dvj1D2oizUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM2NkQzNzVCOTY3NTEzNkU3QzY4QkFBQzRGMkREREIy
Q0U0RTE2NzAeFw0yNjA3MjIyMTU3MDlaFw0yNzA3MjEyMjAyMDlaMDMxMTAvBgNV
BAMTKDBCQTMxNUIxOEIyMzY3QUNDOUQ5OTM3QzlBMTYxRjMwRTgyMEZCMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb4jF4Um3rwmFX3nBWUX+xQvA9
GLDX4S7bTIpMc5m0R/cdNdVEtkYYiwv+pOZLAW+/Mt/adXtglNtOqiGZIJG2+SLG
xAMqT4f1DLM9WCdRpokD5j9jTy6yS+UqhhZ0mrdZeEakWGcDRrDdi5GEW/2T+VOn
ID5hT7UUY2yuMKwlsoi3bNB25RFdaxe4r9cvNpopWj6eGf3BmL95lCJavdW6AtVb
7vM3ZqT0LwQDCsvDJ+Gwxhooz7bZxvyQnoYKEp/p1WqNcgMrQt7rndslrSTk8yY7
ljSrNidckqgkEi2ttd9VkpHCdsCegiUjAb+oKEXsnlNOYJtQrhRv5tPJGo3VAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUC6MVsYsjZ6zJ2ZN8mhYfMOgg+xQwHwYDVR0j
BBgwFoAUbGbTdblnUTbnxouqxPLd2yzk4WcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU1lNzgyWWFacUV3V0YzdVBFSzlrR0g3b0E4a0FzRjlSa2lxdDZUZGpR
QjkvMC82QzY2RDM3NUI5Njc1MTM2RTdDNjhCQUFDNEYyREREQjJDRTRFMTY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDNjZEMzc1Qjk2NzUxMzZF
N0M2OEJBQUM0RjJERERCMkNFNEUxNjcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNZTc4MllhWnFFd1dGM3VQRUs5a0dIN29BOGtBc0Y5UmtpcXQ2VGRqUUI5LzAv
MzIzODMwMzQzYTMxNjEzNDYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzYzMTM4
MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygEGkwAMA0GCSqGSIb3DQEBCwUAA4IBAQAvrughw2P+
U3laPZiLXRpDzWj/hdxR4Z2tNAZABPpMwPxGrpFF4oGYyQ8ShR/gH87eYwxa14j5
Y+4w2pijFPRSzu/AHoWLJjO8nqGrnTYpo6PWADMrP2Kdvf3U4ePbjNGomWqnAJ0k
LE8uBYXAHWfvaCrKRcMmZAT7w5lEDOq1aNbFoIDIvBG5P3aVeqzja2ytlwwXLFK4
OJNUFMr0cu3zaNGL+AZp6FXuVTM/rt65gDrDEBOnfnz4XMqdAkmyiC02llZ0TgWt
Eh651In2HD/h4T3+aILxsHIObplIeCftQl4gNduYTJG9grTf+l+hTME+DgkcotVj
PXPFDs+fFPBj
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:29:57 2026 by rpki-client